Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: qqbR825HB6OIWV7mUnjlpSuR0+Kvm2rQy7S5Us+MB4w=
Subject key identifier: EC:13:AB:1A:3D:AA:B6:4B:D8:DA:E4:86:08:FD:C8:D8:8A:D8:49:91
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 019D37C0584FB2160897586710069B5950E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: E9IB3sYZ-oc7-YPITpGQaihn-so.roa (hash: 5jPfUKrdbwudGJGlNuuaExPB1D+OPBNCB1dk0F5dGxU=)
2: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: Ow38CywJ+GxqnKHppvifFDr556zjwW0KFU/Iwy94j6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:58:4f:b2:16:08:97:58:67:10:06:9b:59:50:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=ec13ab1a3daab64bd8dae48608fdc8d88ad84991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:2b:26:94:d1:45:f0:e4:0d:a1:b9:77:3b:
c1:d4:54:21:41:da:03:12:b1:2f:47:9f:59:6a:4c:
92:9c:fc:36:ea:40:f8:ef:7e:da:5b:6d:f8:ff:28:
64:f8:a6:46:bd:da:a2:d2:aa:16:71:8b:02:10:96:
26:0f:1e:40:8d:95:48:05:51:fa:73:d8:7a:78:57:
2e:89:bf:c9:49:66:0d:e6:64:05:5e:71:d4:d7:56:
23:54:78:6c:e3:cb:eb:95:bd:80:e2:49:69:30:85:
64:d5:41:c8:f8:4b:43:de:39:d9:26:0d:3a:0d:be:
90:ea:11:66:27:5f:d3:d8:46:7f:90:fb:70:06:fc:
cf:4a:de:9f:44:da:c7:58:4a:69:5f:c0:1d:ee:6e:
53:46:fe:6a:56:e0:12:21:26:49:7c:a2:be:63:9d:
a5:aa:f8:eb:b8:73:34:e8:00:21:41:0c:e7:19:08:
ce:87:b9:81:74:50:cd:d3:87:e3:3f:9f:3b:22:58:
a6:0c:83:56:99:2d:0b:74:02:a7:c5:32:89:31:54:
6c:d0:b5:4c:a6:a8:43:9b:bb:e8:d3:5c:a4:5b:29:
76:6f:98:19:2a:f4:f1:5f:15:5e:7c:fb:f4:cd:ef:
d3:5c:9b:31:c0:31:08:8c:6a:e1:c8:9b:99:4c:e1:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:AB:1A:3D:AA:B6:4B:D8:DA:E4:86:08:FD:C8:D8:8A:D8:49:91
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:98:31:e6:88:11:15:43:52:e9:96:ec:99:fe:96:a8:bb:18:
3a:b8:b1:29:f7:a1:4c:60:71:44:96:c5:aa:36:54:7f:6c:55:
22:b2:ab:7b:1d:10:19:63:85:d7:d6:9d:f7:f4:bd:9b:45:cd:
e9:d3:15:4b:10:28:83:38:be:05:b1:fe:27:ed:2b:68:aa:95:
af:04:8e:92:69:a8:6b:34:18:11:32:ef:8e:7c:ca:1d:81:2a:
1c:3b:e8:80:e0:cd:5c:1d:c9:1a:c0:99:67:1d:e2:1f:e7:d2:
84:6f:40:ad:27:da:8f:6d:e0:3c:f7:50:80:ec:8a:f6:61:c3:
8f:78:ed:cc:4b:a0:1b:0f:93:52:24:1f:21:35:03:f3:0e:99:
a9:d6:f7:44:25:43:13:55:6e:56:da:a6:ca:4b:e3:f5:1c:40:
7f:c1:1b:9b:65:b3:6f:97:c0:69:aa:3c:40:b5:73:88:52:aa:
d6:f5:05:39:b6:20:a4:5c:ba:87:dd:00:77:e7:9c:7f:93:c8:
04:af:06:3e:60:81:be:74:65:1d:4b:95:33:e2:c6:3b:99:f5:
21:1a:d1:3c:61:e6:c4:17:5e:af:db:72:ad:b7:b5:12:d8:f5:
0d:3b:62:54:40:a6:b1:4b:c9:f3:02:37:4c:f6:c2:c4:f5:65:
c1:95:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:18 2026 by rpki-client